Microsoft-Windows-EtwCollector

3 events across 1 channel

Event ID	Title	Channel
1	Profiling for target ({ProcessID}) has started.	Operational
2	Profiling for target ({ProcessID}) has stopped.	Operational
5	Machine [Name: {Name}] [OS Description: {OSDescription}] [Architecture: …	Operational

Event ID 1 — Profiling for target ({ProcessID}) has started.

Profiling for target ({ProcessID}) has started.

Profiling for target ({ProcessID}) has started.

Name	Description
`ProcessID`	—

Profiling for target ({ProcessID}) has stopped.

Profiling for target ({ProcessID}) has stopped.

Name	Description
`ProcessID`	—

Machine [Name: {Name}] [OS Description: {OSDescription}] [Architecture: {Architecture}].

Machine [Name: {Name}] [OS Description: {OSDescription}] [Architecture: {Architecture}]